logstash-plugins/logstash-codec-netflow

Issues

• Current status of support for Cisco High-Speed Logging (HSL)

  #93 opened 7 years ago by jorritfolmer
  12

• IP address distortion with Mikrotik and IPFIX when enabling SrcNAT and DstNAT

  #81 opened 7 years ago by bruberg
  4

• Cisco FTD IE 231 & IE 232 (and maybe others)

  #137 opened 7 years ago by farces
  1

• Fields not being correctly interpreted in some flows

  #129 opened 7 years ago by jkavenaugh
  3

• Can't (yet) decode flowset id 266 from observation domain id 262144, because no template to decode it with has been received. This message will usually go away after 1 minute.

  #120 opened 7 years ago by szhong12
  4

• Processing performance issue

  #85 opened 7 years ago by jasonkeller
  47

• Problem with Juniper IPFIX

  #103 opened 7 years ago by broonu
  3

• ConcurrencyError: Detected invalid array contents due to unsynchronized modifications with concurrent users

  #91 opened 6 years ago by jorritfolmer
  32

• Invalid netflow packet received

  #128 opened 7 years ago by ruben-herold
  12

• Implement RFC6759 (Was: Fortigate application_id not processed correctly)

  #116 opened 7 years ago by Sjaak01
  13

• Fortios 5.6.x WAN/LAN directions not separated anymore

  #138 opened 7 years ago by Sjaak01
  9

• Reduced-size encoding for uint32 is larger than uint32

  #136 opened 7 years ago by dfdalamar
  3

• Exception in inputworker... revisited.

  #134 opened 7 years ago by robcowart
  4

• Implement IPFIX reduced size encoding support (Was: Template length exceeds flowset length)

  #123 opened 7 years ago by antiuser
  5

• Add support for Barracuda IPFIX "Extended Uniflow"

  #132 opened 7 years ago by robcowart
  4

• IPFIX unsupported enterprise 15397

  #130 opened 7 years ago by abeeson
  2

• Template not found when using Flexible Netflow templates

  #127 opened 7 years ago by Splitarra
  2

• Current status of IPFIX RFC compliance

  #83 opened 7 years ago by jorritfolmer
  1

• pfflowd: Can't (yet) decode flowset id 259 from source id 0,

  #126 opened 7 years ago by poggenpower
  2

• Can't (yet) decode flowset with netflow-udp-input >= 3.2.0

  #122 opened 7 years ago by Adium74
  4

• NEW Performance processing issue - Cisco ASA 9.8 netflows

  #117 opened 7 years ago by rol-ubiqube
  21

• Missing Flows until I restart logstash

  #114 opened 7 years ago by pgastinger
  8

• Netflow extra fields / Unsupported field in template

  #125 opened 7 years ago by crycookie
  2

• Unsupported field in template 257 {:type=>192, :length=>1}

  #124 opened 7 years ago by sarlacpit
  2

• Netflow sent by Cisco ASA 9.6(1) doesn't contain IN_BYTES and IN_PACKETS

  #112 opened 7 years ago by BROngineer
  4

• logstash not working for Huawei Netstream

  #121 opened 7 years ago by zwirk
  3

• Current status of Netflow v9 RFC compliance

  #84 opened 7 years ago by jorritfolmer
  1

• Update Netflow v9 and IPFIX Information Elements list in YAML files

  #118 opened 7 years ago by jorritfolmer
  1

• [WARN ][logstash.codecs.netflow ] Invalid netflow packet received (End of file reached) [2018-01-10T11:00:18,439][WARN ][logstash.codecs.netflow ] Ignoring Netflow version v210 [WARN ][logstash.codecs.netflow ] Can't (yet) decode flowset id 45841 from observation domain id 0, because no template to decode it with has been received. This message will usually go away after 1 minute.

  #119 opened 7 years ago by manjing
  1

• Can't (yet) decode flowset id 266 from source id 0, because no template to decode it with has been received. This message will usually go away after 1 minute

  #111 opened 7 years ago by szhong12
  6

• Cisco ASA 9.8 netflow v9 - template is read and data parsed successfully, but after some time template not recognized anymore - WARN - can't (yet) decode flowset id...

  #113 opened 7 years ago by rol-ubiqube
  2

• Problem with Sophos IPFIX

  #110 opened 7 years ago by mwpv
  0

• netflow codec doesn't seem to work with logstash 6.0.0

  #109 opened 7 years ago by mwpv
  4

• Exception in inputworker: undefined method `each' for nil:NilClass

  #108 opened 7 years ago by marvinwankersteen
  2

• logstash-codec-netflow 3.5.2 crashes when used with Logstash 6.0.0-beta2

  #90 opened 7 years ago by robcowart
  15

• Redis plugin as input

  #99 opened 7 years ago by PORN-FLAKES
  4

• Template length doesn't fit cleanly into flowset {:template_id=>257

  #101 opened 7 years ago by VamPikmin
  6

• Early flow packet loss when using input-tcp with codec-netflow

  #106 opened 7 years ago by hammerstefan
  1

• Citrix Netscaler: No templates for flowset-ids below 260

  #94 opened 7 years ago by HenryTheSir
  14

• Problem with Gigamon IPFIX

  #104 opened 7 years ago by zzurashvili
  9

• Can I use logstash-codec-netflow to analysis sflow data ？

  #102 opened 7 years ago by JasonLZJ
  5

• Help no output from netflow

  #100 opened 7 years ago
  5

• Codec ignores netflow records containing template + data

  #95 opened 7 years ago by bluefangs
  4

• Netflow v9 of a particular format fails to be parsed by logstash

  #92 opened 7 years ago by bluefangs
  4

• Template length doesn't fit cleanly into flowset AND No matching template for flow id 257

  #86 opened 7 years ago by Devorkin
  6

• Persist netflow template to survive a config reload

  #88 opened 7 years ago by PhaedrusTheGreek
  1

• Issues when using logstash-filter-rest and logstash-netflow-codec together

  #89 opened 7 years ago by WolfangAukang
  1

• Missing fields, parsing errors

  #87 opened 7 years ago by timmernet
  2

• Unary vs Binary operator warning

  #82 opened 7 years ago by untergeek
  2

• When the plugin tries to save the IPFIX (netflow v10) it fails if it doesn't have the proper permissions

  #80 opened 7 years ago by jeremyforan
  1